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511 18 SIO AND IC=(G06F? OR H04L?) 

18 IDPAT (sorted in duplicate/non-duplicate order) 
18 IDPAT (primary/non-duplicate records only) 
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Dynamic link library file protection method in computer system 
involves comparing version number and hash value of replacement version 
of dynamic link library file, with highest version of file installed on 
computer system 

Patent Assignee: MICROSOFT CORP (MICT ) 

Inventor: JAMAL H M A; KRISHNASWAMI B S; SIKECA A; THOMAS A F 
Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 6618735 Bl 20030909 US 99141757 P 19990630 200372 B 

US 2000607738 A 20000630 
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Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

US 6618735 Bl 11 G06F-015/16 Provisional application US 99141757 

Abstract (Basic): US 6618735 Bl 

NOVELTY - A copy of a dynamic link library (DLL) file is saved 
before performing change including overwriting of the DLL file with a 
replacement version of the DLL file. The validity of the change to the 
file is checked, by comparing version number and hash value of the 
replacement version with highest version of file installed on the 
computer system. If the change is invalid, the change is undone with 
the stored copy, 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following: 

(1) computer-readable medium storing DLL file protection program; 

(2) DLL file updating method; and 

(3) computer-readable medium storing DLL file updating program 
USE - For protecting dynamic -link library (DLL) file of computer 

system. ^ 

ADVANTAGE - Prevents unauthorized importation of system files 
during application installation, to prevent invalid system files from 
being added to the system, effectively. 

DESCRIPTION OF DRAWING (S) - The figure shows the operating system 

operating system (70) 

system file protection (SFP) service (80) 
file system drivers (88) 
protected file list (92) 
temporary directory (96) 
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Facilitating method for integrity of assembly employable by 
application programs during runtime providing manifest with a hash 
of the contents of at least one module of a list of modules 

Patent Assignee: MICROSOFT CORP (MICT ) 

Inventor: PARTHASARATHY S; PRATSCHNER S J; SINCLAIR C T 
Number of Countries: 094 Number of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

WO 200201351 A2 20020103 WO 2001US40632 A 20010430 200218 B 
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Priority ~Applicati"oris f No" Type Date) : US 2000604 987 A 20000628 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

WO 200201351 A2 E 29 G06F-009/00 

Designated States (National) : AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA 
CH CN CO OR CU C2 DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS 
JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL 
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AU 200159808 A G06F-009/00 Based on patent WO 200201351 

Abstract (Basic) : WO 200201351 A 

NOVELTY - The method involves providing an assembly with a 
manifest that contains a list of modules that make up the 
assembly . The manifest is provided with a hash of the contents 
of at least one module of the list of modules . Providing the 
manifest with a hash of the contents of at least one module of 
the list of modules involves providing the manifest with a hash 
of each module of the list of modules that constitutes the 
assembly . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for a 
computer readable medium and for a system for facilitating integrity of 
assemblies employable by application programs at runtime . 

USE - For ensuring integrity of components employed by 
application programs at runtime . 

ADVANTAGE - Verifies integrity of components at runtime . 

DESCRIPTION OF DRAWING (S) - The figure shows an assembly 
referencing an assembly with multiple modes. 
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Shared software components or assemblies , for application programs, 
that are provided with security and integrity during runtime by the use 
of digital signature keys 
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Designated States (Regional) : AL AT BE CH CY DE DK ES FI FR GB GR IE IT 
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BR 200112106 A G06F-001/00 Based on patent WO 200201332 

Abstract (Basic) : WO 200201332 A 

NOVELTY - A published assembly name is unique because it is 
published with a publisher's public key. This prevents others from 
publishing an updated version of the assembly that claims to be 
published from the same publisher, as they do not have a matching 
private key. 

USE - For application programs . 

ADVANTAGE - Prevents name spoofing. 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of an 
assembly referencing an assembly having multiple modules . 
First assembly 10 
Module 1 4 
Second assembly 20 
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Object synchronization in multiprocessor system, involves searching 
preset synchronization construct using global data structure, when local 
data structure does not contain data referring to preset construct 

Patent Assignee: SUN MICROSYSTEMS INC (SUNM ) 

Inventor: LINDHOLM T G 

Number of Countries: 001 Number of Patents: 001 
Patent Family: 
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US 6108754 A 19 G06F-012/08 CIP of application US 97832090 

CIP of patent US 5875461 

Abstract (Basic) : US 6108754 A 

NOVELTY - Local data structure that is part of thread-local cache 
assigned to thread, is searched using hash value, for data referring 
to a specific synchronization construct associated with object. If the 
local data structure does not contain reference data, then the specific 
synchronization construct is searched using a global data structure 
containing data associating objects with synchronization constructs 

DETAILED DESCRIPTION - When searching the local data structure, ' an 
in-progress reference is set to indicate an identity of object. The 
termination of association between object and specific synchronization 
construct is prevented, when in-progress reference identifies the 
object. The local data structure is searched for reference data using 
hash value produced by applying data identifying object to a hash 
function. INDEPENDENT CLAIMS are also included for the following: 

(a) object synchronizing program with thread; 

(b) computer system 

USE - Used in multiprocessor computer system to manage dynamic 
association between objects and broad category of synchronization 
constructs e.g. mutexes, monitors, semaphores to synchronize objects 
with threads. 

ADVANTAGE - Manages the dynamic association between objects and 
synchronization constructs through the use of local data structures in 
thread local cache. Data structures that are part of thread local cache 
need not be locked before the thread accesses the data structure. Thus 
overhead and contention resulting from looking-up synchronization 
constructs using global data structures that are protected by global 
locks, is avoided. 

DESCRIPTION OF DRAWING(S) - The figure shows block diagram of 
obj ect synchronization module . 
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Signed binary description file generation method for computer network, 
involves associating module license information with hash of 
corresponding module and related information with corresponding unique 
identification names 

Patent Assignee: ROBBINS V L (ROBB-I); ROTHROCK L V (ROTH-I); ROZAS C V 
(ROZA-I) 

Inventor: ROBBINS V L; ROTHROCK L V; ROZAS C V 
Number of Countries: 001 Number of Patents: 001 
Patent Family: 
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Patent Details: 
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US 20030159055 Al 12 H04L-009/32 

Abstract (Basic) : US 20030159055 Al 

NOVELTY - Several set of module license information and unique 
identification (ID) names for related program, plug-in, verification 
agent , code and dynamic modules are received . Each ID name 
corresponds to set of license information including hash of 
corresponding module and related information signed with a key. The 
license information is associated with corresponding ID name, and 
stored in signed binary description file as associated pairs. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) software system integrity verification method; 

( 2 ) verification system; and 

(3) computer readable medium storing software system integrity 
verification process . 

USE - For generating signed binary description file for multiple 
modules such as program module , plug-in module , verification 
agent, code and dynamic modules used in network computer system and 
public network such as Internet. 

ADVANTAGE - Verifies the integrity of the system with multiple 
components and reduces the expense of signature verification. Manages 
the binary description files for each components , adds complexity and 
overhead to normal software operation. 

DESCRIPTION OF DRAWING (S) - The figure shows a flow diagram of the 
signed binary description file generation process. 
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Processor enumeration method involves starting processors in compute 

node, based on operating system activation request 
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Abstract (Basic) : US 20030065752 Al 

NOVELTY - Several processors are enumerated to a system 
architecture operating system in which the compute node is hot 
plugged, in response to a hot -plug reset. The processors in the 
compute node are started in response to an operating system activation 
request . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) recorded medium storing the processor enumeration program; 

(2) processor enumeration apparatus; and 

(3) processor enumeration system. 

USE - For enumeration of processors in compute node, and also for 
handheld devices, digital signal processing devices, network PCs, 
mini computers and main frame computers. 

ADVANTAGE - Enables device enumeration in an advanced configuration 
and power management interface (ACPI) mechanisms. Avoids implementation 
of a new peripheral component interconnect (PCI) definition for 
supporting hot plug of processor memory node. 

DESCRIPTION OF DRAWING (S) - The figure shows the flowchart 
explaining the enumeration of the processors. 
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Universal signature object for digital data e.g. for computer systems, 
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Abstract (Basic): WO 200233524 Al 

NOVELTY - Computer-readable medium stores a universal signature 
object for binding a digital signature to digital data, 
comprises: one version of the digital data, where each version has a 
file format; a digital signature of signature data, where the 
signature data is a function of the digital data; and information 
concerning an application compatible with the file format of the 
versions . 

DETAILED DESCRIPTION - INDEPENDENT CLAIM included for the 
following: universal signature object viewer; method for digitally 
signing digital data ; signing program 

USE - For computer systems. 

ADVANTAGE - Provides a universal signature object that can bind 
digital signatures to digital data, regardless of the file format. 
With such an object, people and businesses could more easily exchange 
documents and countersign data, such as contracts, without reverting to 
hard copies. Furthermore, with such an object, the digital data and all 
digital signatures can easily be archived. 

DESCRIPTION OF DRAWING (S) - The diagram shows a universal signature 
obj ect . 
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Abstract (Basic) : US 6260189 Bl 

NOVELTY - Pipeline dependencies in multiple instructions are 
identified and instructions are grouped into code block having a field 
which indicates types of pipeline dependencies. The identification and 
grouping steps are implemented in a compiler (104) in conjunction with 
compilation of instructions and field of code block to control 
application of hardware-based dependency checking in processor (108). 

DETAILED DESCRIPTION.- INDEPENDENT CLAIMS are also included for the 
following : 

(a) Instructions processing apparatus; 

(b) Machine readable medium 

USE - For pipelined microprocessors and digital data processors 
e.g. central processing unit, very long instruction word processor, 
single issue processor, digital signal processors, application 
specific integrated circuit (ASIC), personal computer, mainframe 
computer, network computer, workstation and servers. 

ADVANTAGE - Allows a compiler to reduce the number of instruction 
stalls that arises due to execution unit latencies in a pipeline 
processor with the help of compiler controlled dynamic dispatch 
(CCDD) . Decreases the execution time of given program, as well as the 
amount of required checking and renaming hardware, with only minimal 
increase in code size and complexity. Enables or disables hardware 
pipeline checking effectively to reduce unnecessary stalling. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
processing system. 

Compiler (104 ) 

Processor ( 108 ) 
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Abstract (Basic): WO 200157642 A2 

NOVELTY - A programmable logic device (22) is programmed by a 
digital signal processor (DSP) (21) to instantiate a disk interface 
(14) and a bus interface (15) for interfacing the data storage 
controller to a data storage device and to a host respectively. A 
non-volatile memory device stores logic codes associated with the DSP 
and the interfaces . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) Operating system loading method; 

(b) ^plication program launching method 

USE - For controlling storage and retrieval of data to and from 
data storage device including pseudo random, random access storage 
device, magnetic and optical tapes, magnetic and optical disk drives, 
synchronous dynamic random access memory (SDRAM) in computer system. 
Also for operating system loading and application program launching 
in computer system in home, business and scientific computing 
application . 

ADVANTAGE - Storage bandwidth is increased effectively without 
decreasing data storage and retrieval rates. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
data storage controller. 

Disk interface ( 14 ) 

Bus interface (15) 
Digital signal processor (21) 

Programmable logic device (22) 
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Abstract (Basic): WO 200067068 A2 

_ _ _ _ NOVELTY -_A processor-including a mathematical model of-a-disk — 
drive system controls the device. User interface enables user to 
communicate with the device, passing data between user and processor. 
Signal generator receives input signals from processor relating to 
mathematical model, and summer sums together output signal from signal 
generator and noise generator. 

DETAILED DESCRIPTION - The signal generator includes two separate 
signal generators supplying output signals of same frequency, and 
interleaved together to create a signal at twice the frequency of the 
output signals. The output signals are digital, and noise signals from 
noise source are colored. Analog signals created within first frequency 
range are created at frequencies lower than the first frequency range 
by repeating portions of the digital output signal, which are repeated 
by storing output signals in the memory in repetitive fashion. The 
mathematical model provides a series of input signals to the signal 
generator and the processor stores certain patterns that are repeated 
often by the mathematical model in a look-up table. 

USE - For user to employ in developing and testing disk drive 
channel electronics, and can be used for supplying application 
specific test signals for portions of system under test. 

ADVANTAGE - Capable of outputting analog signals for application 
to the disk drive channel electronics. Using dynamic memory allows 
for continuous output of signals while creating new signal patterns. A 
stream of input data can be automatically created by integrated 
software or through external input from the user 

DESCRIPTION OF DRAWING (S) - Drawing shows functional flow chart of 
the functionality of the test equipment for testing channel circuitry 
in accordance with the present invention, 
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Abstract (Basic): CA 2255042 Al 

NOVELTY - A dynamic class loader (40) is used in conjunction with 
a default class loader (30) to load a class into a memory (28) in a 
form suitable for interpretation by a Java interpreter (26) . The class 
loader maintains a set of pointers to the classes that have already 
been loaded for interpretation and the pointers are stored in a hash 
table and_ are_indexed by . class -name . The- class loader also -works-in 
conjunction with one or more byte representations of class files (42) 
provided by the user of an application and a second hash table is 
used to store pointers to these representations, indexed by class name. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for a method 
of loading a class in executable form and for a method of loading 
files . 

USE - Dynamic loading of classes during execution of program 
files . 

ADVANTAGE - Greater flexibility in use and design of programs, 
DESCRIPTION OF DRAWING (S) - The drawing is a schematic illustration 
of the present invention in a preferred embodiment 
Dynamic class loader (40) 
Default class loader (30) 
Memory (28) 
Java interpreter (26) 
Class files (42) 
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Abstract (Basic) : CA 2255035 Al 

NOVELTY - A dynamic class loader (40) is used in conjunction with 
a default class loader (30) to load a class into a memory (28) in a 
form suitable for interpretation by a Java interpreter (26) . The class 
loader maintains a set of pointers to classes that have already been 
loaded into the memory and the pointers are preferably stored in a 
hash table and are indexed by class name. The class loader also wor)cs 
in conjunction with one or more byte representations of class files 
(42) provided by the user- or application and a second hash table is 
used by the class loader to store pointers to these byte 
representations, which are indexed by class name. 

DETAILED DESCRIPTION - AN INDEPENDENT CLAIM is included for a 
method of archiving files. 

USE - Archiving files in a system providing customized entry names. 

ADVANTAGE - Enhanced flexibility of use and design of programs. 
DESCRIPTION OF -DRAWING(S) - The drawing is a schematic diagram of- 
the present invention 

Dynamic class loader (40) 
Default class loader (30) 
Memory (28) 
Java interpreter (26) 
Class files (42) 
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Abstract (Basic) : 


EP 770957 


A 









The computer system includes a program module verifier and at 
least two program modules , each of which includes a digital 
signature and an executable procedure. The first program module also 
includes a procedure call to the second procedure module , a procedure 
call to the program module verifier that is logically positioned in 
the first program module for execution prior to execution of the 

procedure call tO- the-second program— module-, and -instructions 

preventing execution of the procedure call to the second program 
module when the procedure call to the program module verifier 
results in verification denial being returned by the program module 
verifier . 

The second program module includes an executable procedure to be 
performed in response to the procedure call by the first program 
module to the second program module , a procedure call to the program 

module verifier that is logically positioned in the second program 
module so as to be executed prior to completion of execution of the 
second program module 's executable procedure, and instructions 
preventing completion of execution of that executable procedure when 
the program module verifier returns a verification denial with 
respect to the first program module . The program module verifier 
responds to procedure calls by verifying the authenticity of an 
specified program module and by returning a verification confirmation 
or denial. When the program module verifier fails to verify the 
authenticity of a program module , the calling program module throws 
an exception and aborts its execution. 

USE - Restricting use of executable modules such that each 
module can be dynaimically linked only to other executable modules 
whose authenticity has been veri f ied . 
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. . .most recent version of the Hypertext Markup Language (HTML) in their 
browsers. The latest standard. Dynamic HTML, allows new browsers to 
display animated, textured, layered, and retrieved content without multiple 
trips . . . 

...new Memphis OS. To improve security, Microsoft is adding AuthentiCode 
security technology to IE to digitally sign ActiveX and Java 
components . 



